A timing attack vulnerability in mod_auth_digest of Apache HTTP Server version 2.4.66 allows a remote attacker to bypass Digest authentication. The issue is resolved in version 2.4.67. The vulnerability has a medium severity rating with a CVSS score of 4.8.